Privacy policy

IDENTITY: WORLD BAGS, S.L.
C.I.F. / N.I.F. (TAX ID): B53165858
REGISTERED ADDRESS: C/ NORIA, 6, 46550 ALBUIXECH (VALENCIA)
TELEPHONE: 902102410
E-MAIL: shoponline@pacomartinez.mom
DATA PROTECTION OFFICER: gestionrrhh@pacomartinez.mom

1. The personal data provided will not be disclosed to any third party unless otherwise provided for in the specific processing operations.
2. Optionally, for the contracting of cloud computing services and/or e-mail sending and communication services, as well as other related IT services, personal data may be:
• Disclosed to IT service companies located within the European Economic Area (EEA) or,
• Should any of our suppliers or service providers be located outside the European Economic Area (EEA), we guarantee that international data transfers will be carried out in accordance with the applicable legislation. In particular, in the case of providers located in the United States, such transfers may be based on the EU-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov), whose adequacy was recognised by the European Commission on 10 July 2023, or on standard contractual clauses approved by the European Commission.

Optionally, to public administrations and other bodies when required in compliance with legal obligations

For each specific processing of personal data, we will inform you of the legal basis that legitimises it.

5.1. Right of access

This is the right to obtain from the data controller confirmation as to whether or not personal data concerning the data subject are being processed and, if so, the right of access to the personal data and to the following information: the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed, the retention period or the criteria used to determine that period, the existence of the right to request from the controller the rectification or erasure of personal data or the restriction of the processing of personal data concerning the data subject, or to object to such processing, the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), the existence, where applicable, of automated decision-making, including profiling, and, where data are transferred to third countries, the right to be informed of the appropriate safeguards applied.

5.2. Right to rectification

This is the right to request the rectification of your personal data if they are inaccurate, including the right to have incomplete data completed. Please note that, by providing us with your personal data by any means, you guarantee that they are true and accurate and undertake to notify us of any change or modification to them. Therefore, any damage caused as a result of the communication of erroneous, inaccurate or incomplete information in the website forms shall be the sole responsibility of the data subject

5.3. Right to erasure

This is the right to request the erasure of your personal data when, among other circumstances, they are no longer necessary for the purpose for which they were collected, or are otherwise being processed, or you withdraw your consent. Please note that erasure will not apply where the processing of the personal data is necessary, among other circumstances, for compliance with legal obligations or for the establishment, exercise or defence of legal claims.

5.4. Right to restriction

This is the right to request that the processing of your personal data be restricted, which means that in certain cases you may ask us to temporarily suspend the processing of your personal data or to retain it beyond the time necessary when you may need it.

5.5. Right to withdraw consent

This is the right to withdraw, at any time, the consent you gave by ticking “I have read and accept the privacy policy”, as specified in the corresponding section “Exercising your rights” or in the specific processing for commercial communications or the Newsletter. Please note that this right will have no effect if, among other cases, the processing of the personal data is necessary for compliance with a legal obligation, for the performance and maintenance of a contractual relationship, or for the establishment, exercise or defence of legal claims. Furthermore, the withdrawal of consent will not have retroactive effect, i.e. it will not affect the lawfulness of processing based on consent before its withdrawal.

5.6. Right to data portability

This is the right to receive the personal data concerning you which you have provided to us, in a structured, commonly used and machine-readable format, and to transmit it to another controller, provided that: the processing is based on your consent and is carried out by automated or electronic means.

5.7. Right to object

This is the right to object to the processing of your personal data based on our legitimate interest. We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.

5.8. Right to lodge a complaint with a supervisory authority

If you believe that we are processing your personal data incorrectly, you may contact us, and you also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD):

https://www.agpd.es/portalwebAGPD/index-ides-idphp.php

5.9. Exercising your rights

You may exercise your rights by sending a letter to the postal address indicated above or by e-mail to shoponline@pacomartinez.mom, in both cases enclosing a copy of your NIF/NIE/passport or equivalent identity document.

6.1. General provisions

The personal data requested in each of the specific processing activities is adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed, thereby complying with the principle of data minimisation.

The personal data requested in each of the specific processing activities is strictly necessary; refusal to provide it would mean that we are unable to provide the requested service.

The disclosures of personal data envisaged in each of the specific processing activities are in some cases necessary for the performance and maintenance of a contract and in other cases for compliance with a legal obligation to which the data controller is subject.

6.2. Basic processing activities

Quotations.

Personal data will be processed in order to prepare quotations and for any other purposes necessary to provide the contracted service. The legal basis legitimising the processing of personal data is that it is necessary for the performance of a contract and for the implementation of pre-contractual measures. The personal data collected may be disclosed to external partners, as well as to any third party, for the sole purpose of providing the contracted service. Personal data will be retained for as long as the relationship between the parties continues or for the number of years necessary to comply with legal obligations.

Delivery Notes.

Personal data will be processed in order to manage proof of delivery and the condition of the goods. The legal basis legitimising the processing of personal data is the express consent given when signing the delivery note. As a necessary contractual requirement, personal data will be disclosed to the relevant transport company for the effective management of delivery notes, as well as to external partners where necessary, for the sole purpose of providing the contracted service. Personal data will be retained for as long as you do not withdraw your consent, unless it must be kept in order to maintain the relationship between the parties or for the number of years necessary to comply with legal obligations.

Invoicing.

Personal data will be processed for the purpose of issuing the corresponding invoice for the services provided. The legal basis legitimising the processing of personal data is compliance with a legal obligation applicable to the data controller. In compliance with legal obligations applicable to the controller, personal data will be disclosed to the Tax Administration and other necessary official bodies and, as a necessary contractual requirement, to third-party companies providing advisory/administrative services to the controller, as well as, where applicable, for the purpose of claiming warranties in respect of the products and/or services contracted. Personal data will be retained for as long as the relationship between the parties is maintained or for the number of years necessary to comply with legal obligations.

E-mail.

Personal data will be processed in order to channel requests for information, suggestions and complaints from customers or users, for their handling and resolution. The legal basis legitimising the processing of personal data is the legitimate interest of the controller. Personal data will be retained for a period of two years from the time it ceases to be processed, without prejudice to the exercise of the rights to which you are entitled as a data subject.

E-mail Newsletter.

Personal data will be processed in order to manage your subscription to our Newsletter, including sending information, whether personalised or not, about our products or services through various channels such as WhatsApp, e-mail, telephone or SMS. Please note that this type of data processing may involve the analysis of your user profile in order to determine your preferences and thus be able to send you information better suited to your interests.

The legal basis legitimising the processing of personal data is the express consent previously given through one of the following means: web form, physical document or e-mail. You may request to unsubscribe from this type of processing, depending on the channel used, as follows:

• E-mail: Via the link provided for this purpose in each electronic communication, or by means of a similar procedure specified in the commercial communication.
• WhatsApp: By requesting to unsubscribe.
• SMS: By requesting to unsubscribe.
• Telephone: By requesting to unsubscribe.

Where the channel used is WhatsApp, as a necessary contractual requirement, personal data will be disclosed to WhatsApp Ireland Limited, which is located within the EEA. Personal data will be retained for as long as you do not withdraw your consent in the manner indicated for each channel.

Commercial Communications or Newsletter Form.

Personal data collected in the context of subscribing to the newsletter will be processed in order to send information, news, promotions or related content, and to manage users' subscriptions, preferences and unsubscriptions, through various channels such as WhatsApp, e-mail, telephone or SMS. Please note that this type of data processing may involve the analysis of the data subject's profile in order to determine their preferences and thus be able to send them information better suited to their interests.

The legal basis legitimising the processing of personal data is the express consent previously given by ticking "I have read and accept the privacy policy".

The data is obtained directly from the data subject via the newsletter subscription form or through direct contact by e-mail or telephone.

No data is obtained from third parties without express consent.

You may request to unsubscribe from this type of processing, depending on the channel used, as follows:

• E-mail: Via the link provided for this purpose in each electronic communication, or by means of a similar procedure specified in the commercial communication.
• WhatsApp: By requesting to unsubscribe.
• SMS: By requesting to unsubscribe.
• Telephone: By requesting to unsubscribe.

Data will not be disclosed to third parties, except where required by law. However, certain service providers acting as data processors may have access to your data, such as web hosting services, newsletter distribution tools and IT support, always under a contract guaranteeing confidentiality and compliance with the applicable regulations. Where the channel used is WhatsApp, as a necessary contractual requirement, personal data will be disclosed to WhatsApp Ireland Limited, which is located within the EEA.

International data transfers to GOOGLE, LLC. take place through the use of the e-mail application GMAIL. Data processors: IT services.

The personal data provided when subscribing to our newsletter will be retained for as long as the user maintains their subscription. In the event of unsubscribing or withdrawing consent, your data will be deleted unless there are legal obligations requiring its retention.

E-commerce form

Personal data will be processed in order to: respond to enquiries, requests or complaints received via the web form, email or telephone; manage your registration as a registered user to allow access to your personal area, order history and billing details; manage and process orders, payments, invoicing, deliveries and returns; comply with the legal obligations arising from the contract of sale or reservation; and comply with the legal obligations arising from tax, accounting, consumer and e-commerce legislation. Where you have given your express consent, we will send you informative or promotional communications about products, services and news.

The legal basis legitimising the processing of personal data is the express consent given by ticking “I have read and accept the privacy policy”. As a consequence thereof, compliance with legal obligations in the areas of accounting, tax, consumer protection or data protection.

The data will be retained for the duration of the contractual or commercial relationship and for the periods required by law, and, in the case of sending commercial communications, for as long as consent is not withdrawn.

The data will not be disclosed to third-party companies except where required by law or where necessary for the provision of the service, for example: courier or transport companies, for the delivery of orders; banks or payment gateways, for the management of payments; and technology providers that supply web hosting, maintenance or support services. All data processors guarantee compliance with the GDPR (General Data Protection Regulation).

No data transfers will be made outside the European Economic Area without appropriate safeguards.

Personal data will be retained for as long as you do not withdraw your consent, unless it must be retained to maintain the relationship between the parties or for the number of years necessary to comply with legal obligations

In order to meet the needs of our customers, PACOMARTINEZ has integrated a Trustbadge, which forms part of the offering of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany. Each time the Trustbadge is accessed, the web server automatically stores a server log file containing the IP address, the date and time of the visit, the volume of data transmitted and the requesting provider (access data), and records the visit. The individual access data are stored in a security database for the analysis of security issues. The log files are automatically deleted no later than 90 days after their creation. Additional personal data will be transferred to PACOMARTINEZ to the extent that, once an order has been placed, you have opted to use PACOMARTINEZ products or have already registered to use them.

In this case, the contractual agreement established between you and PACOMARTINEZ will apply. For this purpose, personal data are collected automatically from the order data. Regardless of whether or not you are registered as a PACOMARTINEZ customer, the customer is recorded by means of a neutral parameter: the email address encrypted using a one-way encryption function. The email address is converted into this hash value, which PACOMARTINEZ cannot decrypt prior to its transmission. After checking for a match, the parameter is automatically deleted. This is necessary to fulfil our legitimate interests and those of PACOMARTINEZ in providing the buyer protection linked to the specific order and the transactional review services in accordance with Article 6, paragraph (f) of the GDPR (General Data Protection Regulation).

The personal data included in the CV, as well as any data collected during the recruitment process, will be processed in order to manage the company's recruitment process, including interviews, tests and related communications, and to assess the suitability of the candidates submitted. The data will also be kept for future recruitment processes if the candidate is not selected and such retention has been authorised.

The legal basis legitimising the processing of personal data is the express consent given by ticking “I have read and accept the privacy policy”.

The personal data come directly from the candidate and are provided via the CV form.

Personal data will be retained for a period of two years from the moment they cease to be processed, without prejudice to the exercise of the rights to which you are entitled as a data subject. Once this period has elapsed or consent has been withdrawn, the data will be securely deleted

.